RE: Deploying SSL-based VPNs

["Charles Hammett" <chammett () dpsolutions com>]

Juniper has one of the best SSL VPN solutions that I have used on the
market today. It completes end point analysis before allowing the VPN
connection. 

If you want the client to access local resources Citrix makes a great
hybrid SSL-VPN w/ Ipsec device. The Citrix secure access appliance
completes endpoint analysis along with resource limitations. It launches
a local client that does not require any installation and allows your
users to access resources as if they were located on the local segment. 

I favor the Citrix solution over the Juniper because it has a lot of
additional options.

That's my 2Cents

Juniper Link Below
http://juniper.net/products/ssl/

Citrix Link Below 
http://www.citrix.com/English/ps2/products/product.asp?contentID=15005


Charles J. Hammett Jr.
A+ Net+ INet+ Security+ Server+ MCSA MCSE CCEA CCNA JNCIA-FWV
Senior Network Operations Center Engineer
DP Solutions 
 
9160 Red Branch Road, Suite W-1
Columbia, MD 21045
Baltimore (410) 720-3300 Ext. 131
Washington (301) 858-5609 Ext. 131
Fax (410) 992-3559
www.dpsolutions.com



-----Original Message-----
From: Joe [mailto:bitshield () gmail com] 
Sent: Tuesday, March 28, 2006 2:52 PM
To: security-basics () securityfocus com
Subject: Deploying SSL-based VPNs

Hi all

I'm currently interested in SSL-VPN solutions, problems and
deployments. Personally I prefere much more the term "SSL-based remote
access" since almost all those products (except OpenVPN) claiming to
be SSL-VPNs don't offer any network functionality. Would you guys
share your experiences?

What are the issues you spotted when deploying SSL-based remote access
solutions?

Any experiences with certain products? (my company for example made
bad experiences with iGate from SafeNet)

What features make an SSL-remote access solution a good one?

I know these are some very general questions.

Thanks anyway
Joe

------------------------------------------------------------------------
---
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting
experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity
Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------